5e4bb0ccc54426d82e4f931edd315dc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e4bb0ccc54426d82e4f931edd315dc3_JaffaCakes118
Size

632KB
MD5

5e4bb0ccc54426d82e4f931edd315dc3
SHA1

7167c35efa1d88e7055d3004eed68ce295597d70
SHA256

480e187a3cc9f0174091ed3c5e39d59b10fa2e7680acc2c3648b5739dac01742
SHA512

90e2a897c05078b1e1b59f134441a996ca6dd0e197d70cd0db1696a201e54e7b75eea4f41827333811f32ef71fffaba8f0f4ffbe24c159f0a00741e98ebcaa50
SSDEEP

12288:vpN8Z9piuTD945NxQmkWGaJsvklow3Pie0Nt8ZzR84SNbXG:RNruvi5/QmkWGaJsvaX6+zqNF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e4bb0ccc54426d82e4f931edd315dc3_JaffaCakes118

Files

5e4bb0ccc54426d82e4f931edd315dc3_JaffaCakes118
.exe windows:1 windows x86 arch:x86

7ca39d42c8900942f7505ca687ce0275

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

urlmon

HlinkNavigateString

netapi32

Netbios

wsock32

WSACleanup

winmm

timeGetTime

Sections

CODE
Size: 614KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE